$ rpki-client -vvf repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft File: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft (raw, json) Hash identifier: syid1l9Shns9PtTttLiFGu9z7RYMWc+Ig2xIF1IQulA= Subject key identifier: C9:67:93:89:B3:E3:4C:C4:25:9F:D2:41:98:E2:EB:47:87:3E:1D:83 Authority key identifier: 3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B Certificate issuer: /CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Certificate serial: 0DFF44AB24113AE69759DD9D3CE25E7856DF06A9 Authority info access: rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject info access: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft Manifest number: 0178 Signing time: Mon 28 Apr 2025 03:50:39 +0000 Manifest this update: Mon 28 Apr 2025 03:45:39 +0000 Manifest next update: Thu 01 May 2025 09:21:39 +0000 Files and hashes: 1: 3130332e35342e3137302e302f32342d3234203d3e20313336303532.roa (hash: CpTR92roiSPDW46ulFPgC4ZnSRc5NkRxg7oSv8ZLm9M=) 2: 3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl (hash: /A8r1/Z5TtYkmSKJMdmRvIxA/fQ9yaz6Uig49oQI9to=) 3: 3130332e35342e3137312e302f32342d3234203d3e20313530353032.roa (hash: V7RFCHjDQmX/bycVf9vGUXwZyU+bAqqIJro21SU5i0w=) Validation: OK Signature path: rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.crl rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/BA8F77D21E58FE9C939A6B70E2585617E183376B.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/uo930h5Y_pyTmmtw4lhWF-GDN2s.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Thu 01 May 2025 09:21:39 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:ff:44:ab:24:11:3a:e6:97:59:dd:9d:3c:e2:5e:78:56:df:06:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=3C52D4A86ABDDD0D6DA631737F78DC205EEC239B Validity Not Before: Apr 28 03:45:39 2025 GMT Not After : May 1 09:21:39 2025 GMT Subject: CN=C9679389B3E34CC4259FD24198E2EB47873E1D83 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ef:56:c3:1f:c4:9f:7f:d8:88:44:c6:37:f6:05: f3:1c:cf:04:c6:2d:72:a9:9c:97:03:f0:04:5f:3c: 2b:56:85:3e:b1:6f:6c:e8:28:3a:69:2c:28:38:b7: 8e:9f:ed:6b:2f:5c:f4:db:f3:5b:58:e2:7c:52:ab: b4:ac:e8:62:f5:5f:3a:79:9e:bd:a0:b6:0d:fd:1d: 49:67:32:5f:20:8a:a4:2c:49:ef:87:28:41:d3:ae: e6:4f:77:9f:41:fd:4d:cf:28:23:76:42:19:db:d3: 67:c6:77:91:f9:c3:63:a0:83:63:b7:17:f8:36:91: 05:fe:7b:1b:30:07:6b:db:03:6c:a9:52:32:c9:3e: b2:ac:21:58:5b:09:37:15:03:85:94:b7:e7:42:1e: 04:39:f0:06:5c:1f:c6:84:cd:fe:f5:2b:a4:7c:18: 18:b1:42:4f:3b:1b:ae:e4:93:62:31:d0:18:ad:fd: e6:0e:12:a8:da:66:7f:c6:b3:c9:50:e1:f4:6f:c9: 89:8c:43:6d:d2:92:e3:5e:eb:fc:7a:e9:17:f4:53: a8:e6:94:73:89:58:ee:96:72:89:34:76:07:4f:05: 3f:1b:e0:d0:2c:ee:87:ac:9c:c1:85:0c:81:8d:9a: 8c:d8:69:80:ef:ba:19:99:10:e6:a8:6d:71:d6:b2: cc:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: C9:67:93:89:B3:E3:4C:C4:25:9F:D2:41:98:E2:EB:47:87:3E:1D:83 X509v3 Authority Key Identifier: keyid:3C:52:D4:A8:6A:BD:DD:0D:6D:A6:31:73:7F:78:DC:20:5E:EC:23:9B X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.crl Authority Information Access: CA Issuers - URI:rsync://repo-rpki.idnic.net/repo/IDNIC-ID/2/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.cer Subject Information Access: Signed Object - URI:rsync://repo-rpki.idnic.net/repo/837694b7-3256-4666-a3fe-6e82e783b1e1/0/3C52D4A86ABDDD0D6DA631737F78DC205EEC239B.mft X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit Signature Algorithm: sha256WithRSAEncryption 15:11:d6:74:62:a1:6b:f2:f7:25:cc:fd:9e:da:9f:3b:fc:5a: ad:c7:39:41:5b:28:d4:1b:99:8d:25:82:52:40:d5:9d:42:df: b7:f6:dd:bf:19:a0:62:24:3e:a9:e5:ae:04:b8:48:33:fc:ca: f3:10:f1:4d:28:3f:b6:3a:12:c4:7b:b0:00:01:c4:f3:26:d3: 48:8c:08:48:ba:53:59:f6:b2:ba:72:d5:45:16:99:0d:bc:62: dc:56:01:48:fd:2a:11:f5:0c:40:37:84:97:82:88:e4:8c:60: 4f:f2:b9:24:75:cd:a5:ce:8c:75:f2:f1:61:f6:77:42:43:bf: d2:c1:00:49:e4:cb:51:3b:79:a2:64:d5:13:8d:c4:8b:1e:2e: 9c:58:89:e2:7f:01:6e:35:37:16:28:17:d7:e2:d9:1f:0c:d4: 2e:8b:37:48:3d:ef:8c:94:d6:a6:6a:db:3d:b8:23:a1:03:2e: 6b:6f:84:8a:c1:27:e0:24:17:64:d4:43:b6:c2:a4:e4:4d:eb: 0e:b2:56:bc:21:cb:e5:9f:16:07:bb:a6:7e:3e:90:fc:de:c2: db:4e:da:0e:db:77:73:ea:d1:7c:e0:e2:1b:5c:14:01:7f:2b: e5:49:37:53:09:a3:7f:71:1f:a1:b6:b9:c2:90:39:a1:0a:38: c8:5a:b3:60 -----BEGIN CERTIFICATE----- MIIFMjCCBBqgAwIBAgIUDf9EqyQROuaXWd2dPOJeeFbfBqkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1 RUVDMjM5QjAeFw0yNTA0MjgwMzQ1MzlaFw0yNTA1MDEwOTIxMzlaMDMxMTAvBgNV BAMTKEM5Njc5Mzg5QjNFMzRDQzQyNTlGRDI0MTk4RTJFQjQ3ODczRTFEODMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDvVsMfxJ9/2IhExjf2BfMczwTG LXKpnJcD8ARfPCtWhT6xb2zoKDppLCg4t46f7WsvXPTb81tY4nxSq7Ss6GL1Xzp5 nr2gtg39HUlnMl8giqQsSe+HKEHTruZPd59B/U3PKCN2Qhnb02fGd5H5w2Ogg2O3 F/g2kQX+exswB2vbA2ypUjLJPrKsIVhbCTcVA4WUt+dCHgQ58AZcH8aEzf71K6R8 GBixQk87G67kk2Ix0Bit/eYOEqjaZn/Gs8lQ4fRvyYmMQ23SkuNe6/x66Rf0U6jm lHOJWO6Wcok0dgdPBT8b4NAs7oesnMGFDIGNmozYaYDvuhmZEOaobXHWssx9AgMB AAGjggI8MIICODAdBgNVHQ4EFgQUyWeTibPjTMQln9JBmOLrR4c+HYMwHwYDVR0j BBgwFoAUPFLUqGq93Q1tpjFzf3jcIF7sI5swDgYDVR0PAQH/BAQDAgeAMIGFBgNV HR8EfjB8MHqgeKB2hnRyc3luYzovL3JlcG8tcnBraS5pZG5pYy5uZXQvcmVwby84 Mzc2OTRiNy0zMjU2LTQ2NjYtYTNmZS02ZTgyZTc4M2IxZTEvMC8zQzUyRDRBODZB QkRERDBENkRBNjMxNzM3Rjc4REMyMDVFRUMyMzlCLmNybDB0BggrBgEFBQcBAQRo MGYwZAYIKwYBBQUHMAKGWHJzeW5jOi8vcmVwby1ycGtpLmlkbmljLm5ldC9yZXBv L0lETklDLUlELzIvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERDMjA1RUVD MjM5Qi5jZXIwgZMGCCsGAQUFBwELBIGGMIGDMIGABggrBgEFBQcwC4Z0cnN5bmM6 Ly9yZXBvLXJwa2kuaWRuaWMubmV0L3JlcG8vODM3Njk0YjctMzI1Ni00NjY2LWEz ZmUtNmU4MmU3ODNiMWUxLzAvM0M1MkQ0QTg2QUJEREQwRDZEQTYzMTczN0Y3OERD MjA1RUVDMjM5Qi5tZnQwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAhBggrBgEF BQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMBUGCCsGAQUFBwEIAQH/BAYwBKAC BQAwDQYJKoZIhvcNAQELBQADggEBABUR1nRioWvy9yXM/Z7anzv8Wq3HOUFbKNQb mY0lglJA1Z1C37f23b8ZoGIkPqnlrgS4SDP8yvMQ8U0oP7Y6EsR7sAABxPMm00iM CEi6U1n2srpy1UUWmQ28YtxWAUj9KhH1DEA3hJeCiOSMYE/yuSR1zaXOjHXy8WH2 d0JDv9LBAEnky1E7eaJk1RONxIseLpxYieJ/AW41NxYoF9fi2R8M1C6LN0g974yU 1qZq2z24I6EDLmtvhIrBJ+AkF2TUQ7bCpORN6w6yVrwhy+WfFge7pn4+kPzewttO 2g7bd3Pq0Xzg4htcFAF/K+VJN1MJo39xH6G2ucKQOaEKOMhas2A= -----END CERTIFICATE-----Generated at Wed Apr 30 00:05:48 2025 by rpki-client